[Samba] reply_spnego_kerberos in log file

Andrew Bartlett abartlet at samba.org
Fri Jul 29 04:51:53 GMT 2005


On Thu, 2005-07-28 at 10:08 +0200, Matteo.Pignoni at gidi.it wrote:
> Hi all,
> I have installed Samba 3.0.7 on HP-UX and I have configured to work with 
> "security = ADS" with a Windows 2000 Domain Controller and kerberized 
> connection.
> It works fine, I have joined the domain and I can use the share defined, 
> but the log contains:
> 
> [2005/07/28 09:46:32, 1] smbd/service.c:make_connection_snum(648)
>   10.11.50.51 (10.11.50.51) connect to service SHARE initially as user 
> mpignoni (uid=5241, gid=1111) (pid 4784)
> [2005/07/28 09:46:32, 1] smbd/sesssetup.c:reply_spnego_kerberos(263)
>   Username GIDI.IT\CDM001$ is invalid on this system
> 
> The strange is that I have 2 log files for my PC: log.hostname and log.IP
> 
> Is it a big problem?

The standard answer on this is to use winbindd, which will pick up the
machine accounts from the DC, and allow the login.  This is the machine
itself trying to use it's credentials to login to your server (for some
reason).  I think this happens for some browsing or the like, but as you
can see, it isn't a fatal problem for basic operation.

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20050729/2bc2e2b3/attachment.bin


More information about the samba mailing list